Public-only API token restriction is not enforced on team API routes
CVE-2026-58431
Public-only API token restriction is not enforced on team API routes
2026-08-14 归档
今日共收录 1589 条安全情报，包含 784 个 CVE，406 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
CVE-2026-58429
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)
CVE-2026-58428
Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)
Private org member list leaked via /members API endpoint — incomplete fix for PR #38145
CVE-2026-58427
Private org member list leaked via /members API endpoint — incomplete fix for PR #38145
OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)
CVE-2026-58425
OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)
Local File Inclusion via file:// URI in Migration Restore
CVE-2026-58420
Local File Inclusion via file:// URI in Migration Restore
REST API exposes organization membership of private organizations to public
CVE-2026-58417
REST API exposes organization membership of private organizations to public
Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)
CVE-2026-58416
Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)
Two SSRF findings in Gitea 1.26.2
CVE-2026-58314
Two SSRF findings in Gitea 1.26.2
Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs
CVE-2026-57897
Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs
Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration
CVE-2026-57894
Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfil
Cross-repository issue/comment attachment re-linking can expose private attachment content
CVE-2026-57886
Cross-repository issue/comment attachment re-linking can expose private attachment content
Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload
CVE-2026-56755
Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload
Gitea Remember-Me Token Theft Not Invalidating Attacker Session
CVE-2026-56750
Gitea Remember-Me Token Theft Not Invalidating Attacker Session
Gitea SSH Key Parser Denial of Service
CVE-2026-56657
Gitea SSH Key Parser Denial of Service
Privilege Escalation via Access Token Scope Escalation in API
CVE-2026-56654
Privilege Escalation via Access Token Scope Escalation in API
Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
CVE-2026-56443
Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-202
OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)
CVE-2026-55987
OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix o
Email Management API Bypasses ManageCredentials Feature Restrictions
CVE-2026-55986
Email Management API Bypasses ManageCredentials Feature Restrictions
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service